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Amendmeiits to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the application. 



Listing of Claims ; 



1 (currently amended). A method of processing a request fiiom a client roquoot for a document 
from a server in a data processing network, comprising; 

determining whether the requested document is context restricted; 

responsive to determining that the requested document is context restricted, determining 
whether the client lias access authority to tlie requested document by determining whether 
the client has previouslv accessed a document nrovidine context for the requested 
document : and 

responsive to detenninmg thai the client lacks access authority, responding to the client 
request by retuming a version of the requested document that differs from a version 
returned to a client having access authority. 

2 (currently amended)* The method of claim 1, wherein detennimng whether the client has aooeGs 
outhoritv p reviously accessed a document providing context for the requested document includes 
determining whether cookie information in the request indicates that the client has dir e ct ooqogq 
authorit y previously accessed the document providing context for die requested document 

3 (currently amended). Tlie method of claim 2, wherein the client request comprises an HTTP 
formatted request and further wherein determining whether the olient hoo dir e ct ooo e co authority 
inolud e o oomparing otate informotioi^ <poiitainod in th e r e qu e ot to g pr o d o t o nnmod vqIuo cookie 
information indicates that th_e_client has previously accessed the document providing context 
comprise s determining whether the cookie information includes directory path information for 
the requested document . 

4 (currently amended). The method of claim 3, wherein the atote cookie information required to 
o e qt i ir e direct ooooso authority is sent to tl^e client when the client views a document or set of 
documents that provide the required context for the requested document. 

5 (original). The method of claim 1, wherein determining whether the client has access authority 
includes determining whether the client has indirect access authority. 

6 (currently amended). The method of claim 5, wherein the client request comprises an HTTP 
formatted request and further wherein determining whether the client has indirect access 
authority includes d e termining comparing information in a referer field in a header of the request 
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whothor tho oliont hoo boon r e fared - to tho roquootod dooum e nt by a third party oorvor to 
information in a table of authorized referrers accessible to the seryer . 

7 (currently amended). The method of claim 6, wherein detennining whether the client has been 
referred by a third party server comprises detennining whether the vgluo of g roquost hoador fiold 
in th e client request tnatches at least one entry in a table of authorized referrers, 

8 (currently amended). The method of claim 7, wherein the request header field comprises a 
referrer header field of an HTTP request and wherein the table of authorized referrers is stored in 
permanent storage to which the server has access. 

9 (original). The method of claim 1, wherein retuming a version of the requested document that 
differs includes retrieving the requested document and nmning an application to insert a visibly 
detectable notice indicating that the reqiiested document is being viewed out of context. 

10 (currently amended). A computer program product comprising a floqucmoo - o f instructions for 
processing a client request for a document finom a server in a data processing network, the 
oequonoo instructions being encoded on a computer readable medium, comprising: 

computer oodo moott s instructions for determining whether the requested document is 
context restricted; 

computor oodo moons instmctions, responsive to determining that the requested document 
is context restricted, for determining whether the client has access authority to the 
requested document by determining whether the client has previously accessed a 
document providing context for the requested document r e sponoivo to dotormining that 
tho roquofitod dooumont to cont e xt restri eted; and 

e & mputer oodo moQUG instructions for responding to the client request by retuming a 
version of the requested document responsive to determining that the client lacks access 
authority, wherein the version differs from a version returned to a client having access 
authority. 

11 (cxirrently amended). The computer program product of claim 10, wherein the code meona 
instmctions for detennining whether the client has oco b do authority previously accessed a 
document providing context for the requested document includes code moono instructions for 
determining whether cookie information in the request indicates that the client has diiwt-aoeess 
QUthorir v previously accessed th e document providing context for the requested document . 

12 (currently amended). The computer program product of claim 11, wherein the client request 
comprises an HTTP formatted request and further wherein the oodo meono instmctions for 
detennining whetha- the dient hoo diroot occqod authority includoQ comparing otat e information 
e ontoinod in tho roquoct to g prodetermlned coolde information indicates that the client has 
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previously accessed the document providing context comprises instructions for detemiining 
whether the cookie infomiation includes directory path informatjon for the requested document . 

13 (currently amended). The computer program product of claim 12, wherein the state cookie 
information r e quired to - eoquir e ^ir e ot qooqog authorit>^ is sent to the client when the client views 
a document or set of documents that provide the required context for the requested document. 

14 (currently amended). The computer program product of claim 10, wherein the e od e m e am 
instructions for determining whether the client has access authority includes ood e- meoR S 
instructions for determining whether the client has indirect access authority. 

15 (currently amended). The computer program product of claim 14, wherein the client request 
comprises an HTTP formatted request and further wherein the oodo moono instructions for 
determining whether the client has indirect access authority includes oodo moono instructions for 
dotorminitt fi compa.ring information in a referer field in a headCT of the reouest wh e ther tho oliont 
hoQ boon rof e rr e d to the roquootod docum e nt by o third party mnoT to information in a table of 
authorized referrers accessible to the server . 

16 (currently amended). The computer program product of claim 15, wherein the cod e moono 
instructions for determimng whether the client has been referred by a third party server comprises 
oodo moono instructions for determining whether die value of o roquost h e odor fiold in tho client 
request matches at least one entry in a table of authorized referrers. 

17 (original). The computer program product of claim 16. wherein the request header field 
comprises a neferrer header field of an HTTP request and wherein the table of authorized 
referrers is stored in permanent storage to which the server has access » 

18 (currently amended). The computer program product of claim 10. wherein the eode meana 
instructjons for returning a version of the requested document that differs includes cod e m e ons 
instructions for retrieving the requested dociunent and cod e m e ona insbriiGtions for rurming an 
application to insert a visibly detectable notice indicating that the requested document is being 
viewed out of context. 

19 (currently amended). A server for use in a data processing network, the server including a 
processor and a memory containing a c e quenco of instructions for processing a client request for 
a document from a server in a data processing network, the s e quonoo instructions being encoded 
on a computer readable medium, the instructions comprising: 

oomputor cod e means matructions for determining whether the requested document is 
context restricted; 

oomputor ood e moono instructions for determining whether the client has access authority 
to the requested document responsive to determining that the requested document is 
context restricted; and 
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oomputor ood e meoiifl instructions for responding to the client request by retuming a 
modified version of the requested document responsive to determining that the client 
lacks access authority* wherein the version differs firom the requested document returned 
to a client having access authority. 

20 (currently amended). The server of claim 19, wherein the oodo moaa s instructions for 
determining whether the client has a ce e fi fi authority previously accessed a document providing 
context for the reouested document mcludes codo moanfi instructions for determining whether 
cookie info rmation in the request indicates that the client has diroot aoooag H ftulhwi^ previously 
accessed the document providing context for the requested document . 

21 (currently amended). The server of claim 20, wherein the client request comprises an HTTP 
formatted request and further wherein the ee d e m e ans instructions for determining whether the 
oliont boa dir e ct aooooo authority i HolHd e s oomparing $tate information oontain e d in th e- r e queat to 
a prodotomin e d voluo cookie information indicates that the client has previously accessed the 
document providing context comprises instructions for determining whether the cookie 
information mcludes directory path information for the requested document , 

22 (currently amended). The server of claim 21 , wherein the cookie information r e qui y od4o 
acquir e direct ooooofr - authority is sent to the client when the client views a document or set of 
documents that provide the required context for the requested document. 

23 (currently amended)^ The server of claim 19, wherein the ood e -m e am instructions for 
determining whether the client has access authority inolud e o oodo moono include instructions for 
determining whether the client has indirect access authority. 

24 (currently amended). The server of claim 23, wherein the client request comprises an HTTP 
formatted request and further wherem the cod e meono instmctions for determining whether the 
client has indirect access authority mcludes cod e moono instmctions for dotormining comparing 
information in a referer field in a header of the request whothor tho oliont hoa b ae n - raf e rrwi f n rhn 
r e quest e d dooumont by a third party s^=¥ <» to information in a table of authorized referrers 
accessible to the server . 

25-27 (canceled). 

28 (new), A computer program product comprising instructions for processing an HTTP request 
from a client for a requested document from a server in a data processing network, the instruction 
being embedded on a computer readable medium, comprising: 

instructions for determining whether die first document is a context restricted document 
wherein a context restricted document is accessible only after accessing a preceding 
document; 
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rastructions, responsive to detennining that the requested dociunent is a context restricted 
document^ for processing cookie information in the client request to determine whether 
the client has acces&ed the preceding document; and 

instructions for responding to the cHent request by returning a first version of the 
requested document responsive to deteimining from the cookie information that the client 
has accessed the preceding document and for responding to the client request by returning 
a second version of the requested document responsive to determining from the cookie 
information that the client has not accessed the preceding document. 

29 (new). The computer program product of claim 28, further comprising instructions for 
sending a cookie to the client responsive to the client accessing the preceding document, wherein 
the cookie contains inforaiation indicative of tlie location of the requested document, 

30 (new). The computer program product of claim 29, wherein the instructions for sending the 
cookie to the client include instructions for including, in the cookie, path parameter information 
indicative of a directory path m which the requested document is stored. 
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